Microsoft probes Xbox Live hacks

Hackers reported to be stealing player accounts on Xbox Live gaming service

Microsoft Wednesday acknowledged reports of hackers stealing player accounts on the company's Xbox Live gaming service and said it is launching an investigation.

Reports of account theft on Xbox Live have been making the rounds of the network's user forums since at least December, but complaints amped up this week when security researcher Kevin Finisterre -- of "Month of Apple Bugs" fame -- announced that he had been hacked.

In an e-mail interview, Finisterre said he was victimized last Thursday. "We were playing with some folks that were cheating by a known method called 'standbying' or 'bridging,' and during the game, we were told 'I am going to steal your account,'" said Finisterre. "Sure enough, the next day, my Xbox said, 'We are sorry, but someone else has signed on as your gamertag, and we have to log you off.'"

Gamertag is Xbox Live's term for a player's username.

"Immediately after that, I was banned from Xbox live until 3/18/2007," said Finisterre. He called support, but got what he called "the runaround." Several days later, when Finisterre was supposed to be able to again access his account, he logged in to Xbox Live again. "Boom, now we are banned until the 24th," he wrote. "When I call in, they still cannot tell me anything. My account is still under investigation and that's all I know."

Other Xbox gamers have related similar stories. One, identified as "St00mPPP33yYyYY," wrote on Dec. 31 that "sumone [sic] just hacked my account over xbox live...he called bungie and gave thenm [sic] the ip and my account name." Bungie Studios is the Microsoft-owned game developer responsible for the popular Halo series.

Another player, pegged as "Y The Red Bar," relayed a more recent tale. "My Xbox Live account was hacked and all credit card info was stolen and used to run up points, etc. Microsoft says, 'Oh, well, better call your credit card companies; nothing we can do,'" Y wrote a month ago.

On Xbox Live, gamers can use a credit card to buy Microsoft Points, in-network currency that can be used to download movies and TV shows, games and interface modifications.

Finisterre went public after being frustrated by Xbox Live's outsourced support and being stymied in his attempts to reach someone at Bungie who would give him a straight answer. As part of his campaign, Finisterre even posted an audio excerpt of a 36-minute-long conversation with Xbox Live support (download iTunes audio). "It is obvious that they are outsourcing Xbox Live support to ... somewhere with a high population of folks that speak broken English," Finisterre said.

He blamed a group of hackers who go by "Infam0uS" as responsible for at least some of the account hijacking. The group's Web site makes no bones about stealing Xbox Live identities; it currently lists seven, stolen for reasons that include "Talked s*** to JustCallMeFRESH" and "Stole from clan."

Microsoft did not respond directly to questions about whether Xbox Live and/or Bungie.net had been hacked -- accounts stolen by virtue of a data breach, in other words -- or whether other tactics were used, such as phishing e-mails or even a form of "pretexting."

Join the newsletter!

Or

Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.
Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.
Gregg Keizer

Gregg Keizer

Computerworld
Show Comments

Father’s Day Gift Guide

Brand Post

Most Popular Reviews

Latest Articles

Resources

PCW Evaluation Team

Luke Hill

MSI GT75 TITAN

I need power and lots of it. As a Front End Web developer anything less just won’t cut it which is why the MSI GT75 is an outstanding laptop for me. It’s a sleek and futuristic looking, high quality, beast that has a touch of sci-fi flare about it.

Emily Tyson

MSI GE63 Raider

If you’re looking to invest in your next work horse laptop for work or home use, you can’t go wrong with the MSI GE63.

Laura Johnston

MSI GS65 Stealth Thin

If you can afford the price tag, it is well worth the money. It out performs any other laptop I have tried for gaming, and the transportable design and incredible display also make it ideal for work.

Andrew Teoh

Brother MFC-L9570CDW Multifunction Printer

Touch screen visibility and operation was great and easy to navigate. Each menu and sub-menu was in an understandable order and category

Louise Coady

Brother MFC-L9570CDW Multifunction Printer

The printer was convenient, produced clear and vibrant images and was very easy to use

Edwina Hargreaves

WD My Cloud Home

I would recommend this device for families and small businesses who want one safe place to store all their important digital content and a way to easily share it with friends, family, business partners, or customers.

Featured Content

Product Launch Showcase

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?